[AMBARI-13060] Kerberos: Allow user to specify additional realms for auth-to-local rules

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.0
• Fix Version/s: 2.1.2
• Component/s: ambari-server, ambari-web
• Labels: kerberos kerberos-wizard
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 10/Sep/15 15:46
• Updated: 23/Aug/18 12:42
• Resolved: 14/Sep/15 23:23

Description

Allow user to specify additional realms for auth-to-local rules. This will add default rules for the specified realm(s) to the generated auth-to-local rule sets. For example:

RULE:[1:$1@$0](.*@USER_REALM.COM)s/@.*//

The value should be a (comma) delimited list of realm names set in set of global properties in the Kerberos Descriptor.

Issue Links

• causes: AMBARI-24528 Kerberos "Additional Realms" should not require keytab re-generation and cluster restart
• links to: ReviewBoard